GRC/Cybersecurity Consultant in Derby

Job Title: GRC/Cybersecurity Consultant

Location: Fully Remote (UK wide travel required)

Employment Type: Permanent

Salary: Competitive

Start Date: Immediate

Industry: IT Services & Consulting

A leading Security Consultancy in the UK is seeking a Senior Security Consultant with a strong background in security assessments, GRC, and security architecture to join our growing consultancy team. You’ll be part of high-profile programmes that shape the UK’s national and corporate security posture.

This is a remote role with flexibility for travel across the UK, Europe, and occasionally globally required.

GRC Specialist – Key Responsibilities

• Build the new Node.js / React client stack (Next.js experience a plus)
• Integrate with existing Ruby services, adding APIs or middleware as needed
• Drive secure, multi-tenant authorization/authentication (OIDC/OAuth)
• Contribute to frontend design and user experience, especially in financial UI

GRC Specialist – Key Skills Required

• Active and valid SC clearance (mandatory)
• Proven experience in security governance, risk, and architecture
• Strong understanding of security assurance frameworks
• Demonstrable experience as an ISO 27001 Lead Auditor or similar
• Excellent communication, reporting, and stakeholder engagement skills

Desirable / Bonus

• CISSP, CISM, CISP, TOGAF, CPP, or NSPP
• NCSC Certified Professional (CCP) at Practitioner or Senior level
• MOD/Defence Experience

Please apply now if this role is of interest.